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We present quantum key distribution schemes which are autocompensating (require no alignment) 
and symmetric (Alice and Bob receive photons from a central source) for both polarization and time- 
bin qubits. The primary benefit of the symmetric configuration is that both Alice and Bob may 
have passive setups (neither Alice nor Bob is required to make active changes for each run of the 
protocol). We show that both the polarization and the time-bin schemes may be implemented with 
existing technology. The new schemes are related to previously described schemes by the concept 
of advanced waves. 
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PACS numbers: 03.65.Ud, 03.67.Dd, 03.67.Lx, 42.65.Ky 



Of all the capabilities afforded by quantum information 
science quantum key distribution (QKD; for a review, 
see Ref. ) currently shows the most promise for practi- 
cal implementation. Accordingly, there has been a con- 
certed effort to develop QKD schemes that mitigate the 
technical challenges associated with existing approaches. 
Among the successes in this effort are the development 
of autocompensating (alimment-free) schemes for polar- 
ization 131 and time-bin 

H II II qubits. A further 
advance is the development of a symmetric scheme for 
time-bin qubits in which neither Alice nor Bob is re- 
quired to make active changes to their setups 0- Here 
we use the term symmetric to describe QKD schemes in 
which a central source distributes some number of pho- 
tons to both Alice and Bob, such that they share entan- 
glement. This is in contrast to round-trip and one-way 
configurations, in which the photons move according to 
Bob^Alice^Bob and Alice-^Bob, respectively. In this 
Letter, we show that symmetry and autocompensation 
can be combined in a single implementation, for both 
polarization and time-bin qubits. 

This Letter is organized as follows. Beginning with 
polarization-coded QKD, we first present a round-trip 
scheme in which autocompensation is achieved by sam- 
pling the channel birefringence twice (once on the way 
from Bob to Alice and once on the way back). Sec- 
ond, we show how Klyshko's "advanced wave interpre- 
tation" (AWI) can be used to transform this round- 
trip scheme into a one-way scheme imbued with passive 
detection. Third, we apply the AWI again to obtain a 
symmetric autocompensating scheme in which both Al- 
ice and Bob have passive setups. We then repeat these 
three steps for time-bin-coded QKD. Finally, we describe 
feasible implementations of the symmetric autocompen- 
sating schemes for both polarization and time-bin qubits. 

The left column of Fig. Q shows the space-time di- 
agrams of three autocompensating polarization-coded 
QKD schemes. For polarization qubits, autocompensat- 
ing means that the scheme is immune to channel bire- 
fringence. The first scheme (Fig. Q^) requires a round 
trip and is active (both Alice and Bob are required to 



make changes to their respective setups). The scheme 
runs as follows. Bob randomly chooses between polar- 
ization states \y) and \H) -\- \y) (here, and for the rest 
of this Letter, we suppress normalization factors), and 
sends a single photon in that state to Alice. Alice uses 
a Faraday mirror to reflect that single photon back, and 
also sends along an auxiliary photon in the state \y). Al- 
ice encodes a single bit by controlling the time ordering 
of the two photons she sends to Bob. Bob then measures 
each photon in the basis associated with the state of the 
initial photon he sent. Without knowing which state Bob 
sent to Alice, Eve cannot deterministically learn Alice's 
bit setting. From Bob's point of view, the scheme is 
equivalent to Bennett's two-state protocol since he 
is attempting to probabilistically distinguish between two 
nonorthogonal states. The autocompensating feature is 
derived from the unique property of the Faraday rotator: 
whatever the polarization transformation along the line 
from Bob to Alice, the photon that Alice reflects will ar- 
rive in Bob's lab in a polarization state orthogonal to its 
original state . 

The AWI was originally conceived as a method for gen- 
erating one-photon experiments from two-photon exper- 
iments. However, we may reverse this procedure and 
determine which two-photon state embodies the action 
of Alice's Faraday rotator. Using Faraday rotation as an 
example, the AWI associates the single-photon transfor- 
mation 
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In going from Eq. to Eq. the propagation direc- 
tion for H-y^ and V-^-^ is reversed. To preserve the hand- 
edness of the coordinate system, one of the transverse 
directions must be reversed as well. This may be accom- 
plished by replacing Vjj^ with — Vj^. Thus, we see that 
the AWI associates Faraday rotation with the polariza- 
tion singlet state \ JiV) - \ VE). 




FIG. 1: Space-time diagrams of six autocompensating QKD schemes organized by encoding (polarization or time-bin) and 
degree of passivity. The dashed lines and curved arrows show how the AWI relates the round-trip schemes [(A) and (B)] to the 
one-way schemes [(B) and (C)], and the one-way schemes to the symmetric schemes [(C) and (F)]. The dotted lines connecting 
photons indicate entanglement. The photon labels in (C) and (F) are used later in this Letter. 



We arrive at the one-way scheme of Fig. ^3 by "fold- 
ing" the input arm of the Faraday rotator of Fig. QJV 
along the dashed line, thereby replacing a round-trip 
single-photon space-time diagram with a one-way, two- 
photon space-time digram (the dotted line connecting 
the two photons indicates entanglement). What follows 
is a passive-detection version of the three-photon scheme 
presented in Ref. 0. Ahce sends three photons to Bob, 
with either the first two (case 1), the last two (case 2), 
or the first and last photons (case 3) in the singlet state, 
and the other photon vertically polarized. Bob makes his 
measurements using the passive setup shown on the right 
side of Fig. By appropriate postselection, this setup 
effectively makes a random choice of two out of the three 
photons, and brings them together on a non-polarizing 
beamsplitter, which serves to distinguish the singlet state 
from the other three Bell states [l^. Ignoring the first 
Mach-Zehnder interferometer (with relative delay 4t) for 
the moment, we see that the second interferometer (with 
relative delay r) enables either the first two, or the last 



two, photons to meet at the second beamsplitter of this 
interferometer. If these two photons are in the singlet 
state, they will leave by opposite ports. The contraposi- 
tive is also true: if they leave by the same port (and are 
detected by one of the pairs of detectors on each output 
port), then one can infer that they were not in the singlet 
state. Returning to the first interferometer, we see that 
this interferometer provides an opportunity for the first 
and last photons to be analyzed in a similar way. Thus, 
Bob's apparatus probabilistically chooses a pair out of 
the three photons sent by Alice, and determines whether 
the pair is in the singlet state or in some orthogonal state. 
Based on his detections. Bob can rule out at most one 
of the three cases corresponding to Alice's possible signal 
states. Therefore, after Bob has made his detection, Al- 
ice announces whether the run was a "data run" (cases 
1 or 2), or a "test run" (case 3). The data runs are used 
to share key material (one bit per run) and the test runs 
are used to monitor the eavesdropper . 

We may apply the AWI one more time to get a six- 
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FIG. 2: Feasible implementations of the symmetric autocompensating schemes of Figs. 01! andQ^'. The schemes are symmetric 
in the sense that both Alice and Bob receive photons from a common source (S); they are passive in the sense that neither 
Alice nor Bob is required to make active changes to their setups. For the polarization case (A), the six photons are separately 
entangled [see Eq. @]. The three photons going to Bob are sent through two Mach-Zehnder interferometers, the first with 
relative delay 4r, and the second with relative delay r. The three photons below the line in Bob's apparatus are provided 
as a visual indicator of the operation of the first interferometer. For the time-bin case (B), the four photons are separately 
entangled; however, all four photon are effectively entangled by Bob's postselection of those occasions when one photon is found 
in each of the small dotted boxes. 



photon symmetric scheme (Fig. from the three- 

photon one-way scheme by folding along the dotted line 
in Fig. ^3. In this scheme, the source produces the six- 
photon entangled state 

{^-V^-V - y*~y*-)i23456 
^ I*r2 1^3*45 ^6> - iV^i^-aa^^^s'e) ■ (3) 

In Eq. ||2J) we use a compact notation that will simplify 
expressions later in this Letter. The execution of the pro- 
tocol is similar to the previous case, except that instead 
of randomly choosing a three photon state and sending it 
to Bob, Alice uses the same detection setup Bob uses (see 
Fig. By inspecting the state in Eq. we see that 
if Alice determines that photons 1 and 2 are orthogonal 
to the singlet state, then she knows that photons 5 and 
6 are in the singlet state. Similarly, if photons 2 and 3 
are orthogonal to the singlet, then photons 4 and 5 are in 
the singlet state. Alice and Bob can verify that the two 
terms in Eq. ^ are coherently superposed (as opposed 
to statistically mixed) by confirming that a certain joint 
detection (photons 1 and 3 in the singlet state and pho- 
tons 4 and 6 in the singlet state) never occurs. Since the 
singlet state is immune to collective birefringence, this 
scheme, like the round-trip and one-way schemes previ- 
ously described, is autocompensating. 

In the polarization case, only one of the schemes 
(Fig. ^3) presented has been previously reported. In 
the time-bin case, the schemes in both Figs.ni) and^il 
have been described in Refs. 0] and 0, 0|, respectively. 
Therefore, we immediately turn our attention to the sym- 
metric time-bin scheme of Fig. The source produces 



the four-photon entangled state 

{ELEL + LELE) 1234 , (4) 

where E and L stand for early and late, respectively. 
Alice and Bob each have Mach-Zehnder interferometers 
with the delay equal to the early/late time interval. On 
the occasions when all the early photons take the long 
path and all the late photons take the short path, Alice 
and Bob announce their measurement results and verify 
that the proper interference between the two terms in 
Eq. occurred. On the occasions when at least one of 
the photons on each side did not follow this early— >long, 
late^short pattern, Alice and Bob are able to determine 
which of the terms in the superposition was realized. 
In this way they are able to share key material. The 
scheme is passive because Alice and Bob simply record 
the time of detection of single photons exiting the two 
output ports of their respective Mach-Zehnder interfer- 
ometers. The scheme is autocompensating because, on 
the occasions when interference occurs between the two 
terms in Eq. |0J, each term picks up the phase associated 
with two passes through each arm of both interferome- 
ters. Thus, the relative phase along the two paths of 
each interferometer factors out and does not effect the 
measured results. 

It is clear from the states in Eqs. Q and ^ that 
the schemes of Figs.^^ and^ require entangled states 
involving more than two particles. Since the direct gen- 
eration of these states is not currently feasible, it is im- 
portant to determine if the schemes can be adapted to 
work with some number of separately-entangled photon 
pairs. This task is particularly straightforward in the po- 
larization case. Using the familiar notation for the four 
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Bell states, and the mode labels in Fig.np, we observe 

$ + $+$+42536 
= + 1' + *+ + $-$- + $+$+)i245*j6 

= (*-*- + * + *+ + $-$- +$ + $+)2356«'m 
= + * + «'+ + + $ + $+)l346«'j5 • (5) 

We can express this series of equations in words as fol- 
lows. Take three separately-entangled photon pairs (each 
pair in the state $+), and, for each pair, send one pho- 
ton to the left and the other to the right. Perform a 
Bell-basis measurement on any two photons on the left, 
and the corresponding pair on the right will collapse into 
whichever state results from the measurement of the pho- 
tons on the left. Thus, Alice and Bob can replace the 
six-photon entangled state of Eq. (jJJ with three pairs of 
separately-entangled photon pairs, and implement a sym- 
metric, autocompensating protocol that is closely related 
to the one-way scheme of Fig.QjB. Specifically, whenever 
Alice detects a pair of photons in the singlet state, she 
has effectively prepared the corresponding pair of Bob's 
photons in the singlet state. This implementation can be 
seen as an application of entanglement swapping Ts^. 

Obtaining a feasible version of the time-bin imple- 
mentation of Fig. n is also straightforward. The setup 
in Fig. [2J3 shows how Alice and Bob may implement 
this scheme using separately-entangled photon pairs. In- 
stead of the state in Eq. the source creates the state 
*^^3*^24; SLnd, instead of a simple Mach-Zehnder interfer- 
ometer, Bob has the detection setup shown in Fig. 133. 
The first interferometer in Bob's setup allows the first 
photon to meet the second photon at a non-polarizing 
beam splitter. By postselecting the occasions when one 
photon is found to be in each of the small dashed boxes. 
Bob effectively entangles the two photons sent to him in 
precisely the way required by Eq. Q). From this point, 
Alice and Bob each analyze their photons with Mach- 
Zehnder interferometers, and the scheme proceeds as pre- 
viously described. This technique can be viewed as the 
time-bin analog of the polarization-based entanglement 
distillation experiment described in Ref. 

It is interesting to observe that discoveries in the field 
of quantum information (entanglement swapping and en- 
tanglement distillation) can be naturally related to other 
areas of quantum information theory (quantum error cor- 
rection and decoherence-free subpaces) via the AWI, as 
demonstrated in Fig.^ Since the central goal of quantum 
computation is a "folding in time" of a classical compu- 
tation, the AWI may yield insight into the mechanisms 
behind the speed-up achieved by certain quantum algo- 
rithms. 

We have presented symmetric autocompensating QKD 
schemes that can be implemented with existing technol- 



ogy for both polarization and time-bin qubits. The pri- 
mary benefit offered by these new schemes is passive op- 
eration (neither Alice nor Bob is required to make active 
changes to their setups). While the schemes make use 
of existing two-photon sources, it is important to point 
out that current techniques for producing and detecting 
multiple photon pairs have very low yields (~1 detected 
four-fold coincidence per second 
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